Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vlQbTGoH0Vj1qqoPxW12Go419SU.roa
File: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (raw, json)
Hash identifier: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=
Subject key identifier: BE:54:1B:4C:6A:07:D1:58:F5:AA:AA:0F:C5:6D:76:1A:8E:35:F5:25
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF67CA9DB74414B5F8E73167D71C4
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vlQbTGoH0Vj1qqoPxW12Go419SU.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7603
IP address blocks: 2a0f:607:1300::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f6:7c:a9:db:74:41:4b:5f:8e:73:16:7d:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be541b4c6a07d158f5aaaa0fc56d761a8e35f525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:8e:43:6c:ed:a3:67:0e:c7:6f:96:09:02:
86:76:7a:b5:57:23:2b:54:55:dc:32:c9:9f:4d:a1:
ea:e5:d3:89:be:a4:f9:77:19:ba:ef:ea:97:54:4c:
00:2d:42:6a:54:e6:69:5b:50:8f:06:ee:ec:c9:9a:
f3:31:7d:a4:43:ac:e0:f0:35:9e:05:55:48:16:d0:
70:82:e4:8d:ea:f2:05:2c:db:69:5e:d3:cf:c9:0e:
cd:14:3f:5f:28:45:48:da:3a:23:30:10:1c:3f:b8:
bb:62:0d:71:35:05:3a:9b:d5:2f:a7:fa:d7:aa:ba:
fa:c4:6a:53:b1:d3:9d:52:0c:c2:3e:69:f9:0a:6a:
f1:78:df:d2:30:ff:3e:39:fd:bd:a1:fa:2b:ff:bc:
fd:04:17:3b:7e:56:c2:45:60:7f:c9:b1:f1:2a:35:
79:d7:ff:6c:36:65:a8:32:49:a0:23:ae:ba:af:f3:
fc:58:3f:ab:a2:36:4d:12:30:89:db:49:0f:d4:e2:
eb:21:07:48:3b:5e:ed:16:c6:fc:5a:05:0e:b4:b4:
3f:62:2e:ee:78:fa:b4:33:3e:d7:47:26:a0:15:15:
4a:3f:c7:a5:d5:9f:0b:0f:67:18:9d:ad:7a:f1:d1:
a5:d3:6c:8f:78:82:54:be:7a:cd:05:2f:e0:79:ec:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:1B:4C:6A:07:D1:58:F5:AA:AA:0F:C5:6D:76:1A:8E:35:F5:25
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/vlQbTGoH0Vj1qqoPxW12Go419SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1300::/44
Signature Algorithm: sha256WithRSAEncryption
b7:aa:2b:36:98:b7:2d:c4:e9:28:36:56:28:91:3e:94:88:04:
fb:1b:51:f0:69:6d:f7:61:43:4f:ef:9d:66:93:3e:c3:2e:dd:
49:fc:10:42:0f:b4:cf:c3:2d:6c:27:0f:27:f5:fe:bd:cc:f2:
da:db:6c:95:c1:ce:b5:3a:82:59:4b:c0:0d:5c:37:bd:69:3a:
54:d5:02:4a:83:9a:38:41:9d:d8:3c:5f:08:14:92:47:5e:db:
9b:cc:18:e0:34:81:0d:f3:a9:9b:e1:54:54:58:34:0a:1b:e8:
b5:3c:fe:3d:d3:5e:aa:25:0d:70:5b:bf:2c:b7:94:ee:fb:ae:
97:63:94:7e:27:60:34:cb:5c:30:1c:56:02:d0:37:cd:85:1e:
f2:95:8b:83:7b:c5:77:f8:e2:a5:80:0c:62:84:b6:89:1c:1e:
36:0d:ae:ec:c6:61:a3:a4:f6:5d:46:e9:70:39:00:21:a3:b4:
a2:2b:09:91:34:fe:3b:2c:68:a6:67:a4:7d:fb:34:89:39:47:
e3:19:b8:b2:38:d7:89:15:ec:81:5a:ac:e1:57:a0:30:f4:43:
ef:ee:61:d3:04:e7:74:d9:46:a8:6d:b1:3f:13:e9:5a:5c:96:
55:f8:44:ad:b8:28:04:12:24:5e:0c:4b:b1:ed:af:5d:37:45:
5c:8a:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:26 2025 by rpki-client